Entity’s Senior Management or the Information Security Officer periodically reviews and ensures that access to the critical systems is restricted to only those individuals who require such access to perform their job functions
profile_icon
| Sep 08, 2023
Entity ensures that new hires have been duly evaluated for competence in their expected job responsibilities
profile_icon
| Sep 08, 2023
Entity has a documented ISMS Manual which provides a framework that the organization can use to develop, implement, and maintain an effective information security management system
profile_icon
| Sep 08, 2023
Entity has a documented ISMS scope that defines which information and information assets the organisation intends to protect
profile_icon
| Sep 08, 2023
Entity appoints a Compliance Program Manager who is delegated the responsibility of planning and implementing the internal control environment
profile_icon
| Sep 08, 2023
Entity appoints a People Operations Officer to develop and drive forward all HR security-related strategies across the company
profile_icon
| Sep 08, 2023